$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer File: 80a5a637-2442-4c3f-b791-5a2e260822af.cer (raw, json) Hash identifier: 5U1dnNTApRj81LcHg5RW305flgHvGoJlB8d2oiwrB/Y= Subject key identifier: 8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D4922A33126D37C32CEB6D700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 12:45:22 +0000 Certificate not after: Tue 27 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 394688 IP: 98.142.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:22:a3:31:26:d3:7c:32:ce:b6:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 25 12:45:22 2026 GMT Not After : Jun 27 12:45:22 2028 GMT Subject: CN=80a5a637-2442-4c3f-b791-5a2e260822af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:1e:25:08:a3:41:c5:29:f7:1a:92:cd:47: e0:7e:6b:9b:23:25:8e:e9:67:50:78:6c:11:65:52: 46:8d:ff:28:32:bd:0a:34:6d:ba:1f:eb:f1:5c:bd: 14:ac:b4:52:86:5a:6a:e5:31:2f:dd:db:75:1a:0f: a3:42:15:83:8a:ec:91:24:06:1d:8a:90:94:0d:b8: 87:e1:41:8e:48:40:3b:a2:d1:0a:c0:c1:71:ba:0d: f9:9d:de:06:53:04:68:cb:be:56:17:5a:89:05:ed: 50:3f:36:fc:3f:65:2f:c8:fa:18:e6:e6:b2:0f:2c: 94:6a:c1:4a:21:7d:64:99:23:10:b3:fc:68:3e:e6: 71:0f:81:7f:c0:7b:f8:c3:8f:8d:42:8e:1b:bc:63: 29:34:f0:43:9e:b5:1d:98:30:b5:e6:a8:fd:db:23: fc:d5:e2:c3:bf:8f:b7:e1:d9:05:de:1b:9d:de:46: 61:78:f4:84:0c:af:e7:9a:23:f4:5c:45:ee:63:c6: b8:ea:03:4c:b7:5c:ee:70:67:a2:d2:09:26:8d:7e: c0:b6:f1:43:e0:33:61:98:46:ab:e9:27:37:0d:0d: 91:a4:8b:7b:7d:cb:8e:a6:09:19:dc:5a:60:42:65: b5:ba:9c:5f:88:9b:80:a4:36:13:8f:ff:e8:78:71: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 98.142.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394688 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:69:74:60:c1:a5:d2:45:10:73:1c:9a:44:99:0b:61:d3:64: 66:5b:ca:a7:be:fd:42:73:31:94:54:b9:d5:f9:1f:55:a3:a9: fa:e9:7a:11:46:06:75:f8:a6:de:e9:20:75:22:90:81:37:6c: 2a:df:46:be:f7:00:6b:db:1b:1d:8e:ec:d5:d9:94:65:ba:3c: 01:35:df:88:3a:92:8f:16:b4:5d:2d:60:a2:05:24:1f:35:1b: be:ab:84:8b:b7:b3:00:f2:41:3c:39:47:30:55:49:d5:d3:cb: df:14:74:ab:39:0d:82:70:e5:f5:18:41:4e:25:b9:23:f0:bb: 45:b4:17:91:25:5d:ac:84:fe:01:0d:ba:0c:92:5b:9d:05:9d: 1f:53:98:74:f5:7d:1c:ec:9f:d3:c3:8d:6e:dd:e3:c0:70:e5: b6:5c:f9:aa:55:8e:9c:6b:a0:a9:bd:98:ac:64:f0:60:03:b5: 9a:8b:35:ad:3d:df:7c:48:e5:1a:c0:13:b8:65:b9:86:01:d2: 1c:3f:7c:bc:3c:a9:fb:65:08:b2:aa:12:5a:97:9d:54:cf:29: 71:5b:98:12:1f:92:5f:88:08:96:ed:21:b7:52:e9:0a:93:0a: 03:ee:c1:5c:d4:59:bb:84:76:82:32:85:b4:f3:d7:fe:95:cb: 0f:ab:de:5d -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE1JIqMxJtN8Ms621wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMyNTEyNDUyMloXDTI4MDYyNzEyNDUyMlowLzEtMCsGA1UEAxMk ODBhNWE2MzctMjQ0Mi00YzNmLWI3OTEtNWEyZTI2MDgyMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoYeJQijQcUp9xqSzUfgfmubIyWO6WdQeGwR ZVJGjf8oMr0KNG26H+vxXL0UrLRShlpq5TEv3dt1Gg+jQhWDiuyRJAYdipCUDbiH 4UGOSEA7otEKwMFxug35nd4GUwRoy75WF1qJBe1QPzb8P2UvyPoY5uayDyyUasFK IX1kmSMQs/xoPuZxD4F/wHv4w4+NQo4bvGMpNPBDnrUdmDC15qj92yP81eLDv4+3 4dkF3hud3kZhePSEDK/nmiP0XEXuY8a46gNMt1zucGei0gkmjX7AtvFD4DNhmEar 6Sc3DQ2RpIt7fcuOpgkZ3FpgQmW1upxfiJuApDYTj//oeHFVlwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIo5kLFpmO9k8N8GVZqBFPXjeXLzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 MGE1YTYzNy0yNDQyLTRjM2YtYjc5MS01YTJlMjYwODIyYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzgwYTVhNjM3LTI0NDItNGMzZi1i NzkxLTVhMmUyNjA4MjJhZi84MGE1YTYzNy0yNDQyLTRjM2YtYjc5MS01YTJlMjYw ODIyYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJijrwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgXAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABxpdGDBpdJFEHMcmkSZC2HTZGZbyqe+/UJzMZRUudX5H1Wj qfrpehFGBnX4pt7pIHUikIE3bCrfRr73AGvbGx2O7NXZlGW6PAE134g6ko8WtF0t YKIFJB81G76rhIu3swDyQTw5RzBVSdXTy98UdKs5DYJw5fUYQU4luSPwu0W0F5El XayE/gENugySW50FnR9TmHT1fRzsn9PDjW7d48Bw5bZc+apVjpxroKm9mKxk8GAD tZqLNa0933xI5RrAE7hluYYB0hw/fLw8qftlCLKqElqXnVTPKXFbmBIfkl+ICJbt IbdS6QqTCgPuwVzUWbuEdoIyhbTz1/6Vyw+r3l0= -----END CERTIFICATE-----Generated at Wed Mar 25 23:24:59 2026 by rpki-client